CVE-2004-2547

Published: Dec 31, 2004Modified: Apr 16, 2026

2.6

Vector

AV:N/AC:H/Au:N/C:P/I:N/A:N

Exploitability: 4.9 / Impact: 2.9

Source: NVD

Description

NetWin (1) SurgeMail before 2.0c and (2) WebMail allow remote attackers to obtain sensitive information via HTTP requests that (a) specify the / URI, (b) specify the /scripts/ URI, or (c) specify a non-existent file, which reveal the path in an error message.

Affected (46)

Products: Netwin: Surgemail, Webmail

Netwin

2 products

Surgemail

Webmail

Configuration A

46 vulnerable

Vulnerable Software	Affected Versions
Netwin Surgemail	Version 1.0c
Netwin Surgemail	Version 1.0d
Netwin Surgemail	Version 1.1a
Netwin Surgemail	Version 1.1b
Netwin Surgemail	Version 1.1c
Netwin Surgemail	Version 1.1d
Netwin Surgemail	Version 1.2a
Netwin Surgemail	Version 1.2b
Netwin Surgemail	Version 1.2c
Netwin Surgemail	Version 1.3a
Netwin Surgemail	Version 1.3a_rc1
Netwin Surgemail	Version 1.3b
Netwin Surgemail	Version 1.3c
Netwin Surgemail	Version 1.3d
Netwin Surgemail	Version 1.3e
Netwin Surgemail	Version 1.3f
Netwin Surgemail	Version 1.3g
Netwin Surgemail	Version 1.3h
Netwin Surgemail	Version 1.3i
Netwin Surgemail	Version 1.3j
Netwin Surgemail	Version 1.3k
Netwin Surgemail	Version 1.3l
Netwin Surgemail	Version 1.4a
Netwin Surgemail	Version 1.4b
Netwin Surgemail	Version 1.4c
Netwin Surgemail	Version 1.5a
Netwin Surgemail	Version 1.5b
Netwin Surgemail	Version 1.5c
Netwin Surgemail	Version 1.5d2
Netwin Surgemail	Version 1.5d
Netwin Surgemail	Version 1.5f
Netwin Surgemail	Version 1.6a
Netwin Surgemail	Version 1.6b
Netwin Surgemail	Version 1.6d
Netwin Surgemail	Version 1.6e2
Netwin Surgemail	Version 1.6e
Netwin Surgemail	Version 1.7a
Netwin Surgemail	Version 1.7b3
Netwin Surgemail	Version 1.8a
Netwin Surgemail	Version 1.8b3
Netwin Surgemail	Version 1.8d
Netwin Surgemail	Version 1.8e
Netwin Surgemail	Version 1.8g3
Netwin Surgemail	Version 1.9b2
Netwin Surgemail	Version 2.0a2
Netwin Webmail	Version 3.1d